Supposing you don't want to run the Logstash and ElasticSearch combo, for
whichever reasons, you could use stash53's MQTT emitter to publish DNS
queries to an MQTT broker from which you, from different vantage points in your
network, handle these queries.

Assume we've compiled stash53 for MQTT, and are invoking it like this,
specifying the address/port of the broker, and the topic on which to publish
on, as dns/stash/servers/hippo: